10272 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
p4u1	fb31dfe7d5	fix(loader): Allows multiple protocols on one port	2026-02-02 12:12:42 +01:00
Sebastiaan van Stijn	915f5cf25d	Merge pull request #5796 from vvoland/update-go-27.x ... [27.x] update to go1.22.12	2025-02-05 19:24:30 +01:00
Paweł Gronowski	6ee2756538	update to go1.22.12 ... - https://github.com/golang/go/issues?q=milestone%3AGo1.22.12+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.22.11...go1.22.12 This minor release include 1 security fix following the security policy: - crypto/elliptic: timing sidechannel for P-256 on ppc64le Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols. This is CVE-2025-22866 and Go issue https://go.dev/issue/71383. View the release notes for more information: https://go.dev/doc/devel/release#go1.22.12 Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2025-02-04 20:36:34 +01:00
Sebastiaan van Stijn	9f9e405801	Merge pull request #5759 from thaJeztah/27.x_vendor_docker_27.5.0 ... [27.x] vendor: github.com/docker/docker v27.5.0 v27.5.1	2025-01-22 00:46:20 +01:00
Paweł Gronowski	d7cd22f0a2	Merge pull request #5762 from thaJeztah/27.x_bump_golang_1.22.11 ... [27.x] update to go1.22.11 (fix CVE-2024-45341, CVE-2024-45336)	2025-01-21 11:31:54 +01:00
Paweł Gronowski	0e2d4fe890	Merge pull request #5766 from thaJeztah/27.x_backport_bump_dev_tools ... [27.x backport] Dockerfile: dev-container: update buildx v0.20.0, compose v2.32.4	2025-01-21 11:31:12 +01:00
Sebastiaan van Stijn	fbc0a73b35	Dockerfile: update compose to v2.32.4 ... Update the compose cli plugin used in the dev-container full diff: https://github.com/docker/compose/compare/v2.30.3...v2.32.4 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 1546f023fb) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-21 10:05:59 +01:00
Sebastiaan van Stijn	777695f6d5	Dockerfile: update buildx to v0.20.0 ... Update the buildx cli plugin used in the dev-container full diff: https://github.com/docker/buildx/compare/v0.18.0..v0.20.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 7b07242708) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-21 10:05:57 +01:00
Sebastiaan van Stijn	092d23532c	Merge pull request #5764 from vvoland/5763-27.x ... [27.x backport] gha: Adjust release branches	2025-01-20 22:12:08 +01:00
Paweł Gronowski	fa1ba052d6	gha: Adjust release branches ... Adjust all workflows to also run on branches like `27.x` Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit 81b0bb58ba) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2025-01-20 18:24:03 +01:00
Sebastiaan van Stijn	1ccfae7946	update to go1.22.11 (fix CVE-2024-45341, CVE-2024-45336) ... go1.22.11 (released 2025-01-16) includes security fixes to the crypto/x509 and net/http packages, as well as bug fixes to the runtime. See the Go 1.22.11 milestone on our issue tracker for details. - https://github.com/golang/go/issues?q=milestone%3AGo1.22.11+label%3ACherryPickApproved - full diff: https://github.com/golang/go/compare/go1.22.10...go1.22.11 Hello gophers, We have just released Go versions 1.23.5 and 1.22.11, minor point releases. These minor releases include 2 security fixes following the security policy: - crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints A certificate with a URI which has a IPv6 address with a zone ID may incorrectly satisfy a URI name constraint that applies to the certificate chain. Certificates containing URIs are not permitted in the web PKI, so this only affects users of private PKIs which make use of URIs. Thanks to Juho Forsén of Mattermost for reporting this issue. This is CVE-2024-45341 and Go issue https://go.dev/issue/71156. - net/http: sensitive headers incorrectly sent after cross-domain redirect The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header which is redirected to b.com/ will not send that header to b.com. In the event that the client received a subsequent same-domain redirect, however, the sensitive headers would be restored. For example, a chain of redirects from a.com/, to b.com/1, and finally to b.com/2 would incorrectly send the Authorization header to b.com/2. Thanks to Kyle Seely for reporting this issue. This is CVE-2024-45336 and Go issue https://go.dev/issue/70530. Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-20 16:08:27 +01:00
Sebastiaan van Stijn	397c2f87d5	vendor: github.com/docker/docker v27.5.0 ... no diff: same commit, but tagged; https://github.com/docker/docker/compare/38b84dce32c4...v27.5.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-20 11:01:41 +01:00
Paweł Gronowski	a187fa5d2d	Merge pull request #5736 from thaJeztah/27.x_vendor_docker_27.5.0 ... [27.x] vendor: github.com/docker/docker 38b84dce32c4 (v27.5.0) v27.5.0	2025-01-10 17:13:57 +01:00
Sebastiaan van Stijn	e32d69e31c	vendor: github.com/docker/docker 38b84dce32c4 (v27.5.0) ... full diff: https://github.com/docker/docker/compare/v27.5.0-rc.2...38b84dce32c45732606fe09ffebef8b29a783644 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-10 16:04:49 +01:00
Sebastiaan van Stijn	2767e9eb46	Merge pull request #5732 from thaJeztah/27.x_vendor_docker_27.5.0-rc.2 ... [27.x] vendor: github.com/docker/docker v27.5.0-rc.2	2025-01-10 15:59:11 +01:00
Sebastiaan van Stijn	a999a40714	Merge pull request #5735 from vvoland/5734-27.x ... [27.x backport] gha/build: Publish bin image for release branches	2025-01-10 14:52:41 +01:00
Paweł Gronowski	b277537cbe	gha/build: Publish bin image for release branches ... We moved to the major release branches with a `.x` suffix and forgot to adjust this workflow to run on branches like `27.x`. Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com> (cherry picked from commit 987befaeac) Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>	2025-01-10 14:34:13 +01:00
Sebastiaan van Stijn	919350df54	vendor: github.com/docker/docker v27.5.0-rc.2 ... no diff; same commit, but tagged; https://github.com/docker/docker/compare/43fc912ef59a...v27.5.0-rc.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-10 10:12:58 +01:00
Paweł Gronowski	80f7848805	Merge pull request #5726 from thaJeztah/27.x_update_engine ... [27.x] vendor: github.com/docker/docker 43fc912ef59a (v27.5.0-rc.2) v27.5.0-rc.2	2025-01-07 16:33:16 +01:00
Sebastiaan van Stijn	0d27375b07	Merge pull request #5723 from thaJeztah/27.x_backport_rm_oom_score_adj ... [27.x backport] remove remnants of --oom-score-adj daemon config (docs, completion)	2025-01-03 22:42:19 +01:00
Sebastiaan van Stijn	0ced103038	vendor: github.com/docker/docker 43fc912ef59a (v27.5.0-rc.2) ... No changes in vendored code full diff: https://github.com/docker/docker/compare/v27.5.0-rc.1...43fc912ef59a83054ea7f6706df4d53a7dea4d80 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 22:01:56 +01:00
Sebastiaan van Stijn	f068c14063	contrib/completion: remove --oom-score-adj daemon flag ... This flag was deprecated in docker v24.0, and no longer functional since v25.0; fully removed in v26.0, so we can remove the docs for this. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 2db88599fd) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 20:24:26 +01:00
Sebastiaan van Stijn	5d973da95b	docs: dockerd: --oom-score-adj flag ... This flag was deprecated in docker v24.0, and no longer functional since v25.0; fully removed in v26.0, so we can remove the docs for this. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit eb5c507cd1) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 20:24:26 +01:00
Sebastiaan van Stijn	498a416226	Merge pull request #5721 from thaJeztah/27.x_backport_docs ... [27.x backport] docs, man: remove confusing example for "--isolation"	2025-01-03 19:31:21 +01:00
Sebastiaan van Stijn	261d2241eb	docs, man: remove confusing example for "--isolation" ... This snippet was added in [docker@38ec5d8][1]. The intent was to indicate that an empty value is equivalent to passing "default" as value. However, passing the `--isolation` flag _without a value_ (i.e., no `=` specified) will fail in many cases, as any string after it will be parsed as value (e.g. `docker run --isolation busybox` would consider `busybox` as value). This patch removes these lines as they add more confusion than addressing. [1]: 38ec5d86a3 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 7b7a4c020e) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 18:41:59 +01:00
Sebastiaan van Stijn	e0e9feaa16	Merge pull request #5720 from thaJeztah/27.x_backport_fix-container-cp-test ... [27.x backport] test-fixes	2025-01-03 14:48:34 +01:00
Derek McGowan	074820d7bb	Fix cp test to separate source and destination ... Currently the cp will tar from the same directory it will untar into simultaneously. There is a race between reading the file and truncating the file for write, however, the race will not show up with a large enough buffer on the tar side if buffered before the copy begins. Also removes the unnecessary deferred removal, the removal is handled by cleanup and respects the no cleanup env. Signed-off-by: Derek McGowan <derek@mcg.dev> (cherry picked from commit 8c0cb30515) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 13:56:14 +01:00
Sebastiaan van Stijn	8b340f4e5c	TestRunCopyFromContainerToFilesystem: use Tar without options ... Just a minor cleanup; use archive.Tar as we're not using other options here. Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit a8f83d5d99) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2025-01-03 13:56:09 +01:00
Sebastiaan van Stijn	21cdefcec6	Merge pull request #5712 from thaJeztah/27.x_update_engine ... [27.x] vendor: github.com/docker/docker v27.5.0-rc.1	2024-12-23 15:39:06 +01:00
Sebastiaan van Stijn	0e053a5cee	vendor: github.com/docker/docker v27.5.0-rc.1 ... no diff, only using tag instead of commit diff: https://github.com/docker/docker/compare/c23af2910987...v27.5.0-rc.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-23 15:30:03 +01:00
Sebastiaan van Stijn	7595cea3e5	Merge pull request #5706 from thaJeztah/27.x_bump_engine_27.5 ... [27.x] vendor: github.com/docker/docker c23af2910987 (27.x / v27.5.0-dev) v27.5.0-rc.1	2024-12-20 19:54:59 +01:00
Sebastiaan van Stijn	f009ed2b34	vendor: github.com/docker/docker c23af2910987 (27.x / v27.5.0-dev) ... full diff: https://github.com/docker/docker/compare/v27.4.1...c23af2910987f9f3528f60140a5b3d7fedcabbe0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 19:35:56 +01:00
Sebastiaan van Stijn	2dcdf75ad0	Merge pull request #5707 from thaJeztah/27.x_engine_deps ... [27.x backport] update dependencies for docker 27.5.0	2024-12-20 19:35:22 +01:00
Sebastiaan van Stijn	fd818019f5	vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 10c5a57927) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:46:42 +01:00
Sebastiaan van Stijn	f264af6124	vendor: go.opentelemetry.io/otel v1.28.0 ... aligning all related packages to v1.28.0 as well Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 5e40d288c7) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:43:46 +01:00
Sebastiaan van Stijn	3e51dace7c	[27.x] vendor: google.golang.org/genproto f6361c86f094 ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:42:15 +01:00
Sebastiaan van Stijn	2d3e97f32d	vendor: github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 ... full diff: https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.16.0...v2.20.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 9ba73a1a05) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:29:09 +01:00
Sebastiaan van Stijn	d8f2d1b155	vendor: update prometheus dependencies ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 074d1028b5) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:25:39 +01:00
Sebastiaan van Stijn	e3d2562114	vendor: github.com/go-logr/logr v1.4.2 ... full diff: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 97ff1b7c0a) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:22:48 +01:00
Sebastiaan van Stijn	bcec6cb71a	vendor: github.com/cenkalti/backoff/v4 v4.3.0 ... full diff: https://github.com/cenkalti/backoff/compare/v4.2.1...v4.3.0 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 4c85feb4dd) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:22:26 +01:00
Sebastiaan van Stijn	ef6bc69c04	vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 ... documentation changes only, no changes in vendored code full diff: d185dfc1b5...306776ec81 Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 3b48a57b04) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-20 18:21:44 +01:00
Paweł Gronowski	68a89eaa17	Merge pull request #5701 from thaJeztah/27.x_update_docker ... [27.x] vendor: github.com/docker/docker v27.4.1	2024-12-18 12:23:53 +00:00
Sebastiaan van Stijn	d4dc4efef0	vendor: github.com/docker/docker v27.4.1 ... full diff: https://github.com/docker/docker/compare/v27.4.0...v27.4.1 Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-18 13:14:35 +01:00
Albin Kerouanton	b9d17eaebb	Merge pull request #5700 from thaJeztah/27.x_backport_remove_use_of_netfilter_fields ... [27.x backport] cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests v27.4.1	2024-12-16 22:43:43 +01:00
Sebastiaan van Stijn	a08a120bae	cli/command/system: remove BridgeNfIptables, BridgeNfIp6tables in tests ... This is a follow-up to 55e404e7a8, which removed some warnings related to these fields. These fields in the /info response were used to warn users if netfiltering was not enabled on the host when the daemon started. Starting with [moby@db25b0d], detecting whether netfiltering is enabled now [happens when needed][1], making the state that's detected at startup irrelevant. These fields will therefore be deprecated in future, but we can start removing their use in tests. [moby@db25b0d]: db25b0dcd0 [1]: 944e403502/libnetwork/drivers/bridge/setup_bridgenetfiltering.go (L16-L77) Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit ffe0354c2c) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-16 22:19:20 +01:00
Sebastiaan van Stijn	4870b3d067	Merge pull request #5699 from thaJeztah/27.x_backport_remove_system_isabs ... [27.x backport] cli/command/container: use local copy of pkg/system.IsAbs	2024-12-16 18:37:44 +01:00
Sebastiaan van Stijn	d3b59fbd93	cli/command/container: use local copy of pkg/system.IsAbs ... Signed-off-by: Sebastiaan van Stijn <github@gone.nl> (cherry picked from commit 1eda498786) Signed-off-by: Sebastiaan van Stijn <github@gone.nl>	2024-12-16 17:54:05 +01:00
Sebastiaan van Stijn	ac40240c02	Merge pull request #5685 from thaJeztah/27.x_backport_bump_xx ... [27.x backport] update xx to v1.6.1 for compatibility with alpine 3.21	2024-12-13 14:38:52 +01:00
Sebastiaan van Stijn	3fa9480d26	Merge pull request #5690 from thaJeztah/27.x_backport_bump_gomd2man ... [27.x backport] update go-md2man to v2.0.5	2024-12-13 13:13:22 +01:00
Sebastiaan van Stijn	fce7c04971	Merge pull request #5692 from thaJeztah/27.x_backport_remove_netfilter_warnings ... [27.x backport] cli/command/system: remove netfilter warnings from tests	2024-12-13 13:12:33 +01:00